BEGIN:VCALENDAR
VERSION:2.0
PRODID:Linklings LLC
BEGIN:VTIMEZONE
TZID:America/Los_Angeles
X-LIC-LOCATION:America/Los_Angeles
BEGIN:DAYLIGHT
TZOFFSETFROM:-0800
TZOFFSETTO:-0700
TZNAME:PDT
DTSTART:19700308T020000
RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=2SU
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
TZNAME:PST
DTSTART:19701101T020000
RRULE:FREQ=YEARLY;BYMONTH=11;BYDAY=1SU
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTAMP:20260730T152638Z
LOCATION:
DTSTART;TZID=America/Los_Angeles:20260728T124800
DTEND;TZID=America/Los_Angeles:20260728T124900
UID:dac_DAC 2026_sess315_RESEARCH681@linklings.com
SUMMARY:MistleTunnel: Attacking KASLR on Apple M-Series Silicon with a Nov
 el TLB Side Channel
DESCRIPTION:Hanyin Liu, Jin Wu, and Rihui Sun (Harbin Institute of Technol
 ogy); Kaiyuan Rong and Hongpei Zheng (Tsinghua University); Yun Chen (Hong
  Kong University of Science and Technology (HKUST)); Jian Dong (Harbin Ins
 titute of Technology); and Dongsheng Wang (Tsinghua University)\n\nKASLR i
 s a critical defense on macOS, whose implementation on M-series silicon an
 d the latest macOS is further strengthened by hardware–software mitigation
 s, with no practical bypass. We perform a systematic reverse-engineering o
 f the TLB on M-series silicon and uncover a novel user–kernel TLB side-cha
 nnel, TLBarge, that enables precise monitoring of kernel instruction execu
 tion. Leveraging TLBarge, we demonstrate MistleTunnel, the first attack th
 at compromises macOS 26's 15-bit KASLR by recovering its lower 8 bits. Ope
 rating solely through normal syscalls, MistleTunnel collapses the effectiv
 e KASLR entropy to 0.39%, significantly reducing its intended security.\n\
 nTopics: Quantum\n\nTrack: DES6. Quantum Computing, Systems\n\nSession Cha
 irs: Hokeun Kim (Arizona State University); BaekGyu Kim (Daegu Gyeongbuk I
 nstitute of Science and Technology); Xiang Chen (Peking University); Sangy
 eob Kim (Yonsei University); Robert M. Radway (University of Pennsylvania)
 ; Prashanth Mohan (University of Pittsburgh); Xiaoxuan Yang (University of
  Virginia, Stanford University); Ramtin Zand (University of South Carolina
 ); Hadi Kamali (University of Central Florida); Jiafeng Xie (Villanova Uni
 versity); Prabuddha Chakraborty (University of Maine); Junichiro Kadomoto 
 (University of Tokyo); and Yosuke Ueno (RIKEN)\n\n
END:VEVENT
END:VCALENDAR